Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/8zvQurtzgEPsNpR4wEiiVWKTCjo.roa
File: 8zvQurtzgEPsNpR4wEiiVWKTCjo.roa (raw, json)
Hash identifier: yBiZzm9d2JXkUrTFMALwPVWgwo+wqnWwJ+d8WcuyP1M=
Subject key identifier: F3:3B:D0:BA:BB:73:80:43:EC:36:94:78:C0:48:A2:55:62:93:0A:3A
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 01870DA800A0106A99837EAC18AA5AF0F013
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/8zvQurtzgEPsNpR4wEiiVWKTCjo.roa
Signing time: Thu 23 Mar 2023 08:48:46 +0000
ROA not before: Thu 23 Mar 2023 08:48:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200996
IP address blocks: 143.51.0.0/17 maxlen: 17
Validation: Failed, certificate revoked on Wed 20 Dec 2023 09:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:a8:00:a0:10:6a:99:83:7e:ac:18:aa:5a:f0:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Mar 23 08:48:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f33bd0babb738043ec369478c048a25562930a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:56:b9:e9:b8:04:16:e2:c7:5c:df:ef:f7:
3c:23:c0:d1:71:c0:37:a0:88:36:d7:53:ed:53:fb:
5c:f6:c2:6f:ef:c4:41:2d:34:7c:75:53:39:ad:ce:
27:2f:b2:ca:c9:09:65:4e:8c:95:40:a0:a5:0f:ce:
58:ab:63:88:4d:1b:b9:92:2c:54:50:b0:8e:36:e9:
d3:7e:7b:08:07:59:ee:f3:cb:b4:84:b1:21:84:8a:
e1:2d:eb:b1:5b:6d:79:80:7d:7e:ef:e9:ba:75:2c:
55:f3:2a:06:66:29:76:21:4c:11:29:5d:d6:00:da:
0e:00:a8:9b:0c:c1:9a:01:de:df:29:26:5d:5a:c9:
8f:95:63:25:e5:fd:2b:bf:7f:1f:d1:42:64:2f:e0:
03:00:d0:db:17:bf:ae:1f:a9:3e:9a:51:d6:89:43:
5c:59:5f:f4:33:dc:03:06:ca:37:71:6c:36:9e:19:
c3:59:7a:a9:7d:e0:ee:86:df:8f:e6:db:0e:4a:63:
74:99:90:e7:e6:0a:56:b4:b2:b1:d5:fb:a7:c5:d4:
ce:b1:74:58:aa:a1:01:27:a5:67:49:26:ed:11:97:
00:42:f9:d9:51:03:98:df:8a:a3:9c:7d:0c:1e:6b:
71:ec:59:4c:27:cd:9f:20:1c:e8:04:ef:12:57:5e:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3B:D0:BA:BB:73:80:43:EC:36:94:78:C0:48:A2:55:62:93:0A:3A
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/8zvQurtzgEPsNpR4wEiiVWKTCjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.51.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5d:f8:cb:c1:06:10:fe:9e:cf:f9:ff:36:0d:0b:23:96:ad:a8:
55:df:9b:7b:ba:73:82:32:f5:a2:02:33:4f:8f:66:84:66:fa:
54:56:c3:69:09:c4:6e:80:ab:05:58:fc:b9:bb:f4:17:27:14:
fa:38:0d:9c:1a:f5:e8:e7:f0:72:95:03:47:33:a0:a8:14:b7:
a8:95:09:ce:c8:c8:f0:c0:c1:45:8d:ce:8c:0c:b0:39:4f:60:
b6:e0:da:18:e4:fb:fd:df:49:ee:b7:b3:c1:64:a7:4a:f8:91:
e9:7d:01:77:af:4d:7e:f9:6e:f2:7b:96:d4:b6:c0:fc:7e:c9:
72:0a:bb:d9:06:ad:c6:be:5e:49:b4:a0:e6:0d:3f:a7:7e:2b:
0a:fe:c8:0b:af:f7:af:47:10:0d:b8:a0:66:fc:ae:1b:78:42:
db:af:4c:a7:85:fe:79:97:f2:a6:50:6c:9f:e0:5b:7a:9b:77:
ee:6f:be:3b:0a:8f:a3:1b:b3:2f:fb:80:39:af:bc:e7:70:72:
75:f2:56:95:e4:ae:4d:38:73:49:8d:ef:3c:5a:74:f5:2b:9b:
a5:5a:f4:3b:31:fc:4b:4a:9d:54:74:87:d7:48:89:ad:6f:bd:
89:06:76:ef:cf:fe:c4:d0:d1:12:1b:cf:57:3e:ef:5b:6d:ba:
81:1a:40:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcNqACgEGqZg36sGKpa8PATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx
YWU3MzgwHhcNMjMwMzIzMDg0ODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzNiZDBiYWJiNzM4MDQzZWMzNjk0NzhjMDQ4YTI1NTYyOTMwYTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLJWuem4BBbix1zf7/c8I8DRccA3
oIg211PtU/tc9sJv78RBLTR8dVM5rc4nL7LKyQllToyVQKClD85Yq2OITRu5kixU
ULCONunTfnsIB1nu88u0hLEhhIrhLeuxW215gH1+7+m6dSxV8yoGZil2IUwRKV3W
ANoOAKibDMGaAd7fKSZdWsmPlWMl5f0rv38f0UJkL+ADANDbF7+uH6k+mlHWiUNc
WV/0M9wDBso3cWw2nhnDWXqpfeDuht+P5tsOSmN0mZDn5gpWtLKx1funxdTOsXRY
qqEBJ6VnSSbtEZcAQvnZUQOY34qjnH0MHmtx7FlMJ82fIBzoBO8SV17CBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPM70Lq7c4BD7DaUeMBIolVikwo6MB8GA1UdIwQY
MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt
MTU3NmM2ZjU4OWM5LzEvOHp2UXVydHpnRVBzTnBSNHdFaWlWV0tUQ2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5
LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjzMAMA0G
CSqGSIb3DQEBCwUAA4IBAQBd+MvBBhD+ns/5/zYNCyOWrahV35t7unOCMvWiAjNP
j2aEZvpUVsNpCcRugKsFWPy5u/QXJxT6OA2cGvXo5/BylQNHM6CoFLeolQnOyMjw
wMFFjc6MDLA5T2C24NoY5Pv930nut7PBZKdK+JHpfQF3r01++W7ye5bUtsD8fsly
CrvZBq3Gvl5JtKDmDT+nfisK/sgLr/evRxANuKBm/K4beELbr0ynhf55l/KmUGyf
4Ft6m3fub747Co+jG7Mv+4A5r7zncHJ18laV5K5NOHNJje88WnT1K5ulWvQ7MfxL
Sp1UdIfXSImtb72JBnbvz/7E0NESG89XPu9bbbqBGkAl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:01 2024 by rpki-client on console-fra.rpki-client.org